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AMENDMENTS TO THE CLAIMS 



1. (Currently amended): An updating system for an encrypted key for a 
wireless LAN in which a onc or more wireless access point is p oint3 (APs) arc 
provided on a LAN, said wireless access pointA Ps being wirelessly connected to a plurality 
o fonc or more wireless access terminal devices (STAs) and in which data is encrypted and 
transmitted between the wireless access poin tA P or APs and the plurality of 
wireless access terminal devices^ STA or — STAs — t© — effect — communication 
(encrypted communication) :said system comprising^ 

a key management server (SV) device; said key management server (SV) 
device, LAN-connected to said wireless access point thc AP , comprising: 

aSV storage unit for holding k encrypted keys used in the encrypted 

communication between said wireless access poin t AP or APs and 
the plurality of wireless access terminal devices STA or STAs , 
where k is not less than 1; and 

an encrypted key generating unit generating said ^encrypted keysk ey 

and storing the generated k_encrypted keysk ey in said SV^torage 
unit; 

wherein said key management server SV device generating said encrypted key in 
said encrypted key generating unit to store the generated encrypted key 
in said SV storage unit, said SV device controls controllin g said encrypted 
key generating unit to update one of said encrypted key- keys stored in 
said SV-storage unit and delivers to deliver the updated encrypted key to 
said wireless access pointAP and to said plurality of wireless access 
terminal devices STA or STAs . 
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2. (Currently amended): The updating system for an encrypted key for a 
wireless LAN as defined in claim 1 wherein; 

upon updating said encrypted key stored in said SV^storage unit, said key 
management serverS V device generates and updates a sole encrypted key 
at a time by said encrypted key generating unit. 

3. (Currendy amended): The updating system for an encrypted key for a 
wireless LAN as defined in claim 1 wherein; 

upon updating said encrypted key stored in said SV-storage unit, said key 

management server SV device generates a sole encrypted key at a time by 
said encrypted key generating unit and sequentially updates k encrypted 
keys stored in said SV^torage unit one-by-one at a preset interval. 

4. (Currently amended): The updating system for an encrypted key for a 
wireless LAN as defined in claim 1 wherein; 

where k is greater than L said key management serverS V device sequentially 

updates all except a remaining onef k — t) of said k encrypted keys stored 
in said SV^torage unit one-by-one at a preset first interval, said key 
management server SV device updating the remaining one key at a 
second interval which is longer than said preset first interval that for said 
fk — 1) encrypted keys . 

5. (Currently amended): The updating system for an encrypted key for a 
wireless LAN as defined in claim 2 wherein; 

said wireless access point AP comprises an updating unit updating an nth 

encrypted key, stored and managed by said wireless access point AP-er 
APs, on reception of a delivered nth encrypted key updated by said key 
management serverS V device, where 1 < n < k, and where k is greater 



109020 v2; 2C4C02I.DOC 



5 



Application No.: 09/677,968 



Docket No.: A3156.0018/P018 



than 1, and an encryption unit encrypting an encrypted key updating 
notification message, using an encrypted key other than said nth 
encrypted ke y, for advising said STA or STAs of that effect ; 

each of said plurality of wireless access terminal devicesS TA comprising a key 
generating unit generating an STA-encrypted key updating requesting 
message on reception of said encrypted key updating notification 
message from said wireless access point AP and an encryption unit 
encrypting said S3Arencrypted key updating requesting message, using 
the same encrypted key as that used in said encrypted key updating 
notification message , to advise said AP of that effect ; and 

said wireless access point AP also comprising a transmission unit advising said 
key management serve rSV device of the STA encrypted key updating 
request on reception of said STA-encrypted key updating requesting 
message from said STA ; 

said key management serverS V device also comprising a verification unit 

verifying whether or not an encrypted key may be delivered to one of 
said plurality of wireless access terminal devicesj rPA on reception of the 
STA encrypted key updating requesting message from said wireless 
access point AP, and a delivery unit that delivers, if such verification is 
true, delivering to said wireless access point AP the encrypted key 
addressed to said one of said plurality of wireless access terminal 
devices STA if it is verified that said encrypted key may be delivered to 
said STA . 

6. (Currendy amended): The updating system for an encrypted key for a 
wireless LAN as defined in claim 2 wherein; 
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said wireless access point AP comprises an updating unit updating an nth 

encrypted key, stored and managed by said wireless access pointAP-or 
APs, on reception of a delivered nth encrypted key updated by said key 
management server deviceS Y^ where 1 < n < k, and an encryption unit 
encrypting an encrypted key updating notification message, using an 
initially updated one of k encrypted keys stored and managed by said 
wireless access point A P, to advise said STA of that effect ; 

each of said plurality of wireless access terminal devices STA comprising a 

generator unit generating an STA-encrypted key updating requesting 
message on reception of said encrypted key updating notification 
message from said wireless access pointA P and an encryption unit 
encrypting said STArencrypted key updating requesting message, using 
the same encrypted key as that used to encryptm said encrypted key 
updating notification messag e, to advise said AP of that effect ; 

said wireless access pointA P also comprising a transmission unit advising said 
key management serverSV device of the STA encrypted key updating 
request on reception of said STArencrypted key updating requesting 
message from said STA ; 

said key management serverS V device also comprising a verification unit 

t 

verifying whether or not an encrypted key may be delivered to one of 
said plurality of wireless access terminal devicesS TA on reception of the 
STA encrypted key updating requesting message from said wireless 
access pointA P and a delivery unit that delivers, if such verification is 
true, delivering to said wireless access point AP the encrypted key 
addressed to said one of said plurality of wireless access terminal 
devices STA if it is verified that said encrypted key may be delivered to 
said STA . 
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7. (Currently amended): The updating system for an encrypted key for a 
wireless LAN as defined in claim 5 wherein 

said wireless access pointA P- comprises a generator unit 

generating an STA encrypted key delivery message on reception of 
an encrypted key addressed to said one of said plurality of wireless access 
terminal devicesS 1 !^ from said key management server SV device; and 

an encryption unit encrypting said STArencrypted key delivery message, using 

an encrypted key other than the nth encrypted ke y, to advise said STA of 
that effect ; 

said one of said plurality of wireless access terminal devicesS ^A also comprising 
an updating unit updating an nth encrypted key stored and managed by 
said one of said plurality of wireless access terminal devicesS TA on 
reception of an nth encrypted key by said STArencrypted key delivery 
message from said wireless access pointA P. 

8. (Currently amended): The updating system for an encrypted key for a 
wireless LAN as defined in claim 6 wherein 

said A Fwireless access point comprises a generator unit generating an STA 
encrypted key delivery message on reception of an encrypted key 
addressed to said ST Aone of said plurality of wireless access terminal 
devices from said SV kev management server device; and 

an encryption unit encrypting said S?Arencrypted key delivery message, using 

an encrypted key other than the nth encrypted ke y, to advise said STA of 
that effect ; 

said ST Aone of said plurality of wireless access terminal devices also comprising 
an updating unit updating an nth encrypted key stored and managed by 
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said ST Aone of said plurality of wireless access terminal devices on 
reception of saida n nth encrypted key by said 8TA-encrypted key delivery 
message from said A Pwireless access point . 

9. (Currendy amended): The updating system for an encrypted key for a 
wireless LAN as defined in claim 5 whereini 

said A Pwireless access point comprises a generator unit generating an STA 
encrypted key delivery message on reception of an encrypted key 
addressed to said ST Aone of said plurality of wireless access terminal 
devices from said S Vkev management server device, and 

an encryption unit encrypting said ^rPA-encrypted key delivery message, using 
an initially updated one of k encrypted keys stored and managed by said 
A Pwireless access poin t , to advise said STA of that effect ; 

said ST Aone of said plurality of wireless access terminal devices also comprising 
an updating unit updating an nth encrypted key stored and managed by 
said S^ Aone of said plurality of wireless access terminal devices on 
reception of an nth encrypted key by delivered said STA-encrypted key 
delivery message from said A Pwireless access point . 

10. (Currendy amended): The updating system for an encrypted key for a 
wireless LAN as defined in claim 6 whereini 

said A Pwireless access point comprises^ 

a generator unit generating an STA-encrypted key delivery message on 
reception of an encrypted key addressed to said ST Aone of said 
plurality of wireless access terminal devices from said S Vkey 
management server device^ and 
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an encryption unit encrypting said 55A-encrypted key delivery message, 
using an initially updated one of k encrypted keys stored and 
managed by said A Pwireless access poin t , to advise said STA of 
that effect ; 

said ST Aone of said plurality of wireless access terminal devices also comprising 
an updating unit updating an nth encrypted key stored and managed by 
said ST Aone of said plurality of wireless access terminal devices on 
reception of an nth encrypted key by delivered said ^rEA-encrypted key 
delivery message from said A Pwireless access point . 

11. (Currendy amended): The updating system for an encrypted key for a 
wireless LAN as defined in claim 1 wherein^ 

said S3r Aone of said plurality of wireless access terminal devices comprises means 
for notifying the A Pwireless access point of a lumped STA-encrypted key 
updating requesting message on detection of a preset factor; 

said A Pwireless access point comprising means for notifying said SV key 

management server device of the lumped STA encrypted key updating 
request on reception of said lumped STA-encrypted key updating 
requesting message from said S : £ Aone of said plurality of wireless access 
terminal devices ; 

said S Vkey management server device comprising means for verifying whether 
or not the encrypted key addressed to said ST Aone of said plurality of 
wireless access terminal devices can be delivered in a lump to said 
ST Aone of said plurality of wireless access terminal devices on reception 
of said lumped S3Arencrypted key updating request from said 
A Pwireless access point ; and 
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means for delivering encrypted key addressed to said S : £ Aone of said plurality of 
wireless access terminal devices in lump to said A Pwireless access point if 
said verifying means has verified that the encrypted key can be delivered 
in a lump to said S ! E Aone of said plurality of wireless access terminal 
devices ; 

said A Pwireless access point also comprising means for generating a lumped 
STArencrypted key delivery message on reception in lump of said 
encrypted keys addressed to said ffE Aone of said plurality of wireless 
access terminal devices from said S Vkev management server devic e, and 
for notifying said STA of that effect ; 

said ST Aone of said plurality of wireless access terminal devices also comprising 
means for updating the encrypted keys stored in said ffE Aone of said 
plurality of wireless access terminal devices in lump on reception of said 
lumped S5A-encrypted key delivery message from said A Pwireless access 
point . 

12. ( Currently amended) : An updating method for an encrypted key for a wireless 
lANcomprising: 

(a) providing a onc or more wireless access poin tp oints (APs) provided on a 
LAN, said wireless access pointAFs being wirelessly connected to a 
plurality ofe ne- or more wireless access terminal devices (STAs) and in 
which data is encrypted and transmitted between the A Pwireless access 
point and the STA or STAs plurality of wireless access terminal devices;- ^o 
effect communication termed as "encrypted communication", 

(b) generating, by a key management server (SV) device, LAN-connected to 
said A Pwireless access point , k encrypted keys, k being not less than 1, 
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used for encrypted communication between said A Pwireless access point 
and said STA or STAs p luralitv of wireless access terminal devices ; 

(c) storing and managing, by said S Vkey management server device the 
generated k_encrypted keysk ey; 

(d) updating one of the encrypted key -keys under a preset condition, and 

(e) delivering the updated encrypted key to said A Pwireless access point and 
to said STA or STAs pluralitv of wireless access terminal devices . 

13. (Currendy amended): The updating method for an encrypted key for a 
wireless LAN as defined in claim 12 whereini 

said S Vkey management server device in updating said k encrypted keys stored 
and managed by said S Vkey management server updates said k encrypted 
keys at a rate of one at a time. 

14. (Currendy amended): The updating method for an encrypted key for a 
wireless LAN as defined in claim 12 wherein^ 

said S Vkey management server device in updating said k encrypted keys stored 
and managed by said S Vkey management server device sequentially 
updates said k encrypted keys at a rate of one -by-one at a preset time 
interval. 

1 5. (Currendy amended): The updating method for an encrypted key for a 
wireless LAN as defined in claim 12 whereini 

where k is greater than 1 ^ said S Vkey management server device sequentially 
updates all except a remaining one key f k — Jr) of said k encrypted keys 
stored in and managed by said SV key management server device one -by- 
one at a first preset interval, said S Vkey management server device 
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updating the remaining one key at a second interval longer than foresaid 
first preset interval fk — 1) encrypted keys . 

16. (Currently amended): The updating method for an encrypted key for a 
wireless LAN as defined in claim 13 wherein^ 

said A Pwireless access point has encrypted communication with said STA or 
STA spluralitv of wireless access terminal devices using another an 
optional encrypted key other than anthe nth encrypted key stored in and 
managed by said A Pwireless access point , during a period of time since 
updating of the nth encrypted key stored in and managed by said 
A Pwireless access point until the another encrypted key is updated next, 
where 1 < n < k. 

17. (Currently amended): The updating method for an encrypted key for a 
wireless LAN as defined in claim 13 whereini 

said A Pwireless access point has encrypted communication with said STA or 

STAsplurality of wireless access terminal devices , sequentially using each 
one of k jk — 3r) encrypted keys, other than anthe nth encrypted key 
stored in and managed by said A Pwireless access point , during a period 
of time since updating of the nth encrypted key stored in and managed 
by said A Pwireless access point until next updating of encrypted key, 
where 1 < n < k. 

18. (Currently amended): The updating method for an encrypted key for a 
wireless LAN as defined in claim 13 wherein^ 

said A Pwireless access point has encrypted communication with said STA or 
yPA splurality of wireless access terminal devices , using an initially 
updated one of k encrypted keys stored in and managed by said 
A Pwireless access point . 
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19. (Currently amended): The updating method for an encrypted key for a 
wireless LAN as defined in claim 16 wherein:, 

said plurality of wireless access terminal devices encryp t STA or STAs has/have 
encrypted communication with said A Pwireless access point , using an 
optional one of (k — Hsaid k encrypted keys, other than the nth 
encrypted key, stored in and managed by said STA or STAs plurality of 
wireless access terminal devices . 

20. (Currently amended): The updating method for an encrypted key for a 
wireless LAN as defined in claim 16 whereini 

said plurality of wireless access terminal devices communicat c STA or STAs 

has/have communication with said A Pwireless access point , sequentially 
using each one of said k {k — 3-) encrypted keys, other than the nth 
encrypted key, stored in and managed by said STA or STAs plurality of 
wireless access terminal devices . 

21. (Currently amended): The updating method for an encrypted key for a 
wireless LAN as defined in claim 16 wherein^ 

said plurality of wireless access terminal devices communicate STA or STAs 

has/have communication with said A Pwireless access point , using the 
last updated one of k encrypted keys stored in and managed by said STA 
or STAs plurality of wireless access terminal devices . 

22. (New): An encryption key management system, comprising: 

a key management server device, comprising: 
an encryption key generating unit, and 
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an encryption key storage unit that stores k encryption keys 
generated by said encryption key generating unit; 

a wireless access point coupled to said key management server device; 
and 

a plurality of wireless access terminal devices wirelessly coupled to said 
wireless access point, each of said wireless access terminal devices 
storing said k encryption keys. 

23. (New): The encryption key management system of claim 22, wherein one 

of said plurality of wireless access terminal devices generates and sends a 
request for a replacement key for one key of said plurality of encryption 
keys; and 

wherein said key management server device sends a first message that is 
encrypted with another one of said plurality of encryption keys, 
said first message comprising said replacement key. 

24. (New): The encryption key management system of claim 23, wherein said 

request comprises identifying information of said one of said plurality of 
wireless access terminal devices and wherein said key management server 
verifies said identifying information. 

25. (New): The encryption key management system of claim 22, further 

comprising an open key encryption messaging protocol employed by 
said key management server device, said' wireless access point, and said 
plurality of wireless access terminal devices, and wherein said key 
management server sends a second message comprising said plurality of 
encryption keys, and wherein said second message is encrypted by said 
open key encryption messaging protocol. 
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